Privacy Policy

Who we are

Salesfloor CRM is private business software operated by Universal Media US for its own sales staff, interns and invited partners. It is not offered to the general public and has no self-service sign-up. Contact: info@universalmediaus.com.

What we collect

• Account data — name, work email address, job role and permissions, sign-in timestamps and in-app activity (which pages were used and for how long) for staffing and payroll purposes.
• Business records you enter — prospect and advertiser contacts, outreach notes, proposals, bookings, inventory, timesheets, mileage, receipts and payout records.
• Mail we send on your behalf — when an administrator connects Microsoft 365, we send messages as the connected mailbox and record what was sent. The connection is send-only; we do not read inboxes.
• QuickBooks Online data — described below.

QuickBooks Online data

An administrator may connect one QuickBooks Online company file per workspace using Intuit's OAuth 2.0 authorization with the com.intuit.quickbooks.accounting scope.

What we access

• Company information (company name and realm id), to label the connection.
• Vendor bills that still carry a balance — vendor name, document number, transaction and due dates, total and balance — so the company's outstanding obligations can be seen alongside booked revenue.
• Profit & loss summary totals for the year to date — total income, total expenses and net income.

Why, and what we do not do

This data is read so that company leadership and finance staff can reconcile CRM revenue and internal payout records against the books in one view. The integration is read-only: the application issues query and report reads only and never creates, edits, voids or deletes anything in QuickBooks, does not move funds, and does not use the Intuit Payments API. We do not read payroll data or customer payment instruments.

How it is stored

Bills and totals are fetched live for each page view and are not copied into a long-term store; only the timestamp of the last successful read and the text of the last error are recorded. The OAuth access and refresh tokens are encrypted with AES-256-GCM using a server-held key before being written to a database table that is readable only by our server-side service role — browser code never receives them. Tokens are scoped to a single workspace, and the QuickBooks realm id is stored against that workspace so one workspace can never read another's connection.

Retention and disconnecting

An administrator can disconnect at any time from Finance → QuickBooks or at /disconnect/quickbooks. Disconnecting asks Intuit to revoke the token and deletes our stored tokens and the connection record. Because QuickBooks figures are not copied into our database, no QuickBooks financial records remain after disconnecting.

Service providers we use

We do not sell data or use it for advertising. Data is processed by these providers on our behalf:

• Lovable — application hosting and deployment (the application runs on Cloudflare's edge network via Lovable).
• Supabase — PostgreSQL database, user authentication, file storage and server secrets, hosted in the United States.
• Intuit — QuickBooks Online, when an administrator connects it.
• Microsoft — Microsoft 365 / Graph, when an administrator connects a mailbox for sending.
• Google (Gemini via Lovable AI) — AI features such as prospect research, message drafting and coaching summaries. Only the text needed for the request is sent.

Security

Traffic to the application and to Intuit is served over HTTPS/TLS. Database access is controlled by per-row policies tied to the signed-in user's workspace and permissions. Third-party credentials are held as server-side secrets and are never included in browser code. Connection tokens are additionally encrypted before storage. We do not write tokens or secrets to application logs. We do not claim any formal security certification.

Retention and deletion

Business records are kept for as long as they are needed for company operations, payroll and tax record-keeping. Deactivated user accounts are recoverable for a short window and then purged. To request access to, correction of, or deletion of your personal data, email info@universalmediaus.com from your work address; we will respond within 30 days. Records we must keep for legal or tax reasons (for example approved timesheets and payout history) may be retained after other data is removed.

Changes

We will update this page and its "last updated" date when the integrations or data practices described here change.